i believe this is a mistake, the unclosed `<small>` tag is rendering the entire form this way.
session.secure_https